CVE-2015-1790

🗓️ 12 Jun 2015 00:00:00Reported by redhatType

The PKCS7_dataDecodefunction in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data

Reporter	Title	Published	Views	Family All 287
ALT Linux	Security fix for the ALT Linux 9 package openssl10 version 1.0.1k-alt3	15 Jun 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt3	15 Jun 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt2.M70P.1	26 Jun 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt3	15 Jun 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt3	15 Jun 201500:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect Sterling Connect:Express for UNIX (CVE-2015-4000, CVE-2014-8176, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792)	24 Jul 202022:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Security Network Protection	16 Jun 201821:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect Informix Genero (CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792 & CVE-2015-4000)	3 Jun 202116:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect multiple N series products	15 Dec 202118:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Storwize V7000 Unified (CVE-2014-8176, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792)	18 Jun 201800:09	–	ibm

Source	Link
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
ftp	www.ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc
lists	www.lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html
fortiguard	www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015
support	www.support.apple.com/kb/HT205031
lists	www.lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html
lists	www.lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay

13 Dec 2022 00:00Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.22899